THE CLAIMS 

A detailed listing of the claims is provided below. A status identifier is provided 
for each claim in a parenthetical expression following each claim number. 

1 . (Currently Amended) A method for controlling access to a network by a 
wireless client, the method comprising: 

assigning a network address to the wireless client, wherein the network 
address has a lease period; 

sending the assigned network address to the wireless client prior to 
establishing a secure link; 

establishing the secure link using the assigned network address: and 

sending an address of a wireless access point to the wireless client, wherein the 
wireless access point is adapted to prov i d e acc e ss to th e n e twork for th e w i r ele ss c lie nt 
handle the secure link established by the wireless client^ an4 

i f th e w i re l ess c li ent fai l s to e stabl i sh th e s e cur e li nk w i th the w i re l ess access 
po i nt and r e qu e st a renewa l of th e ass i gn e d address v i a th e s e cur e l i nk with i n the 
le as e p e r i od, i nval i dat i ng the ass i gn e d n e twork addr e ss, thereby pr e v e nting th e 
w i reless c lie nt from access i ng the network . 

2. (Original) The method of claim 1 , wherein the assigned network 
address and the wireless access point address are sent to the wireless client in a DHCP 
offer packet. 

3. (Original) The method of claim 1, wherein the secure link is an 
IPSEC tunnel. 

4. (Original) The method of claim 1, wherein the assigned network 
address is sent to the wireless client via the wireless access point. 
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5. (Original) The method of claim 1, wherein the address of the 
wireless access point that is sent to the wireless client comprises an IP address and a 
MAC address. 

6. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 1 . 

7. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 2. 

8. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 3. 

9. (Previously Presented) A method for controlling access to a network by a 
wireless client, the wireless client using an assigned network address having a lease 
period to communicate with the network, the method comprising: 

engaging in a negotiation of a secure link with the wireless client; 

communicating with an address server of the network to determine whether the 
lease period of the leased network address has expired; and 

if the lease period is determined to be expired, terminating the negotiation, 
thereby preventing the wireless client from accessing the network. 

10. (Original) The method of claim 9, wherein the negotiation is a 
negotiation of an IPSEC tunnel. 

1 1 . (Original) The method of claim 9, wherein the address server is a 
DHCP server. 
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1 2. (Currently Amended) A method for controlling access to a network by a 
wireless client, the method comprising: 

receiving a request for a network address from the wireless client; 

attaching information to the request to indicate that the request originated 
from a wireless client; 

relaying the request to the address server; 

receiving an assignment of an address from the address server, the address 
having a lease time; 

relaying the assignment of the address to the wireless client; 

negotiating the establishment of a secure link with the wireless client using the 
assigned address : and 

i f th e l e ase t i me expires befor e th e s e cur e l ink is e stabl i shed, d e ny i ng th e 
wir ele ss c l i e nt access to th e network using the assigned address to communicate with 
clients via a wireless access point . 

1 3. (Previously Presented) The method of claim 1 2, further comprising: 
broadcasting an ARP packet to check whether there are any other clients having 

the same assigned address of the wireless client; and 

if a response to the ARP packet is received, terminating the negotiation, 

thereby denying the wireless client access to the network. 

14. (Previously Presented) The method of claim 1 2, further comprising: 

in response to the negotiation, creating an ARP entry that maps the assigned 
address of the wireless client to a MAC address of the wireless client. 

15. (Original) The method of claim 12, wherein the request is a DHCP 
discover packet, the method further comprising: inserting data into an optional field of 
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the packet to indicate that the paclcet was received from a wireless client; and relaying 
the packet to the address server. 

1 6. (Previously Presented) The method of claim 1 2, further comprising: 
receiving a renewal request packet having a request for a renewal of the lease 

time from the wireless client; 

if the secure link is successfully negotiated with the wireless client, inserting 
data into an optional field of the renewal request packet to indicate that the renewal 
request packet was received from a wireless client; and 

relaying the renewal request packet to the address server. 

1 7. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 9. 

18. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 10. 

19. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 12. 

20. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 13. 

21. (Original) On a wireless client, a method for gaining access to a 
network, the method comprising: 

broadcasting a request for an address on the network; 

receiving an assignment of a leased address from the network, the leased 
address having a lease time; and 
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negotiating a secure link with the network before the lease time expires. 

22. (Original) The method of claim 21, wherein the request for an 
address is broadcast as a DHCP discover packet. 

23. (Original) The method of claim 21, wherein the secure link is an 
IPSEC tunnel. 

24. (Previously Presented) The method of claim 21 , wherein the negotiating 
step further comprises: 

generating an ARP packet having the lease address; and 

in response to the ARP generation, initiating a negotiation of the secure link 
with the network. 

25. (Original) The method of claim 21, wherein the leased address is 
received in a packet, wherein the packet additionally contains the network and MAC 
address of a wireless access point, wherein the secure link is negotiated with the 
wireless access point corresponding to the network address. 

26. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 21. 

27. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 22. 

28. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 23. 
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29. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 24. 

30. (Original) A computer-readable medium having stored thereon 
computer-executable instructions for performing the method of claim 25. 

31. (Previously Presented) The method according to claim 1 wherein the 
assigned network address having the lease period is sent to the wireless client prior to 
authentication of the wireless client. 

32. (Previously Presented) The method according to claim 1 wherein the 
lease period is of a duration that is sufficient for the wireless client to establish a 
secure link with the wireless access point and send a renewal request of the assigned 
address via the secure link. 

33. (Previously Presented) The method according to claim 1 further 
comprising the step of extending the lease period of the assigned network address to 
a predefined duration if the wireless client establishes a secure link with the wireless 
access point and requests a renewal of the assigned address via the secure link. 
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